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Usin g LDAP directory caches 
Sophie Cluet, Olga Kapitskaia, Divesh Srivastava 

May 1999 Proceedings of the eighteenth ACM SIGMOD-SIGACT-SIGART symposium 
on Principles of database systems 

Publisher: ACM Press 

Full text available: |l |pdf(1.32 MB) Additional Information: full citation , references , citings , index terms 



Internet Privacy Enhanced M ail 
Stephen T. Kent 

August 1993 Communications of the ACM, volume 36 issue 8 
Publisher: ACM Press 

Full text available: fl pdf(4.82 MB) Additional Information: l ull citat ion, inferences, citings, index terms . 
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Query in g network directories 

H. V. Jagadish, Laks V. S. Lakshmanan, Tova Milo, Divesh Srivastava, Dimitra Vista 

June 1999 ACM SIGMOD Record , Proceedings of the 1999 ACM SIGMOD international 

conference on Management of data SIGMOD '99, volume 28 issue 2 
Publisher: ACM Press 

Full text available* HI pdf(1 50 MB) Additional Information: full citation, abstract , references , citings, i ndex 
. ISSI- 1 ^ * = terms 

Heirarchically structured directories have recently proliferated with the growth of the 
Internet, and are being used to store not only address books and contact information for 
people, but also personal profiles, network resource information, and network and service 
policies. These systems provide a means for managing scale and heterogeneity, while 
allowing for conceptual unity and autonomy across multiple directory servers in the 
network, in a way for superior to what conventional relation ... 

Use of nested certificates for efficient, dynamic, and trust preserving public key 
infrastructure 

Albert Levi, M. Ufuk Caglayan, Cetin K. Koc 

February 2004 ACM Transactions on Information and System Security (TISSEC), volume 

7 Issue 1 
Publisher: ACM Press 
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review 

Certification is a common mechanism for authentic public key distribution. In order to 
obtain a public key, verifiers need to extract a certificate path from a network of 
certificates, which is called public key infrastructure (PKI), and verify the certificates on 
this path recursively. This is classical methodology. Nested certification is a novel 
methodology for efficient certificate path verification. Basic idea is to issue special 
certificates (called nested certificates) for other certifica ... 

Keywords: Digital certificates, key management, nested certificates, public key 
infrastructure 



5 Location-aware mobile applications based on directory services 
Henning Maass 

August 1998 Mobile Networks and Applications, Volume 3 Issue 2 
Publisher: Kluwer Academic Publishers 

Full text available: IP pdf(421 .47 KB) Additional Information: full citation , abstract, references, citings, index 
■ = terms 

Location-aware applications are becoming increasingly attractive due to the widespread 
dissemination of wireless networks and the emergence of small and cheap locating 
technologies. We developed a location information server that simplifies and speeds up 
the development of these applications by offering a set of generic location retrieval and 
notification services to the application. The data model and the access protocols of these 
services are based on the X.500 directory service and the I ... 

6 CORDS: From gra pevine to trader: the evolution of distributed directory technolog y 
Roger Y. M. Cheung 

November 1992 Proceedings of the 1992 conference of the Centre for Advanced 
Studies on Collaborative research - Volume 2 

Publisher: IBM Press 

Full text available: ^ pdf(657.25 KB) Additional Information: full citation , abstract , references 

Distributed directory is an essential component in a distributed processing environment 
that involves multiple systems connected via a LAN (local area network) and WAN (wide 
area network). This paper reviews the evolution of distributed directory technology from 
simple name-to-address mapping to sophisticated import request-to-export service 
mapping by examining four different kinds of directory systems: Grapevine, Global name 
service, ISO Directory, and Trader. The characteristics of these dire ... 



7 Providing the X.500 directory user with QOS information 
Paul Barker 

July 1994 ACM SIGCOMM Computer Communication Review, Volume 24 Issue 3 
Publisher: ACM Press 

Full text available: ^pdf(842.75 KB ) Additional Information: full citation , abstract , index terms 

This paper describes some work which helps users of the X.500 directory to understand 
the unevenness of quality of service (QOS) concomitant with a widely distributed 
directory. In particular a user may see highly variant response times and availability of 
information for different parts of the directory. The paper discusses, and dismisses, two 
possible sources of QOS information. I use a third approach whereby a directory user 
interface maintains a record of response times and information availa ... 




8 Location-aware mobile a p plications based on directory services 
Henning MaaB 

September 1997 Proceedings of the 3rd annual ACM/IEEE international conference on 
Mobile computing and networking 

Publisher: ACM Press 
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9 O penLDAP everywhere revisited 
Craig Swanson, Matt Lung 

July 2005 Linux Journal, Volume 2005 issue 135 
Publisher: Specialized Systems Consultants, Inc. 

Full text available: [j) html(31.10 KB) Additional Information: full citation , abstract , index terms 

A new version of Samba makes this company-wide directory solution even more capable 
than before. 

10 O penLDAP everywhere 
Craig Swanson, Matt Lung 

December 2002 Linux Journal, volume 2002 issue 104 
Publisher: Specialized Systems Consultants, Inc. 

Full text available: g] html(23.52 KB ) Additional Information: full citation , abstract , index terms 

A single company-wide directory service offers mail address lookup and file sharing to 
Linux and Windows users. 

11 Deficiencies in LDAP when used to support PKI 
David Chadwick 

March 2003 Communications of the ACM, volume 46 issue 3 
Publisher: ACM Press 

Full text available: fS3 pdfd 00.30 KB) 

g: t ' . 00 ' Additional Information: full citation , abstract , refere nces , index terms 
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Problems arise when a protocol initially developed to simplify access to a distributed 
directory failed to take into account all the uses the directory was originally intended for. 

12 Paranoid penguin: LDAP for security. Part I 
Mick Bauer 

July 2003 Linux Journal, volume 2003 issue 111 

Publisher: Specialized Systems Consultants, Inc. 
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L— 1- * Additional Information: full citation 
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13 Paranoid penguin: authenticate with LDAP 
Mick Bauer 

August 2003 Linux Journal, volume 2003 issue 112 

Publisher: Specialized Systems Consultants, Inc. 

Full text available: [j] html(18.13 KB) Additional Information: full citation 



14 Adaptin g globus and kerberos for a secure ASCI grid 
Patrick C. Moore, Wilbur R. Johnson, Richard J. Detry 

November 2001 Proceedings of the 2001 ACM/IEEE conference on Supercomputing 
(CDROM) 

Publisher: ACM Press 

Full text available: ^ pdfd 43,26 KB) Additional Information: full citation , abstract , references , index terms 
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Porting a complex secure application from one security infrastructure to another is often 
difficult or impractical. Grid security associated with the Globus toolkit is supported by a 
Grid Security Infrastructure (GSI) based on a Public Key Infrastructure where users 
authenticate to the grid using X509 certificates. Kerberos security is based on a trusted 
third party, secret key infrastructure where users authenticate using encrypted tickets. 
However, both GSI and Kerberos provide a Generic Secur ... 

Keywords: ASCI, GSSAPI, globus, grid, kerberos, security 



15 Access control: First experiences using XACML for access control in distributed 
^ s ystems 

^ Markus Lorch, Seth Proctor, Rebekah Lepro, Dennis Kafura, Sumit Shah 
October 2003 Proceedings of the 2003 ACM workshop on XML security 
Publisher: ACM Press 

Full text available* IB pdf( 459 30 KB) Additional information: full citation , abstract , references, citings , index 

terms , review 

Authorization systems today are increasingly complex. They span domains of 
administration, rely on many different authentication sources, and manage permissions 
that can be as complex as the system itself. Worse still, while there are many standards 
that define authentication mechanisms, the standards that address authorization are less 
well defined and tend to work only within homogeneous systems. This paper presents 
XACML, a standard access control language, as one component of a distributed a ... 

Keywords: access control decision, access control enforcement, authorization, 
distributed system security, policy language, policy management 



16 Generative communication in Linda 
David Gelernter 

January 1985 ACM Transactions on Programming Languages and Systems (TOPLAS), 

Volume 7 Issue 1 
Publisher: ACM Press 

Full text available* fi3 pdf(2 48 MB) Additional Information: full citation , abstract , references , citings, index 
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Generative communication is the basis of a new distributed programming langauge that is 
intended for systems programming in distributed settings generally and on integrated 
network computers in particular. It differs from previous interprocess communication 
models in specifying that messages be added in tuple-structured form to the computation 
environment, where they exist as named, independent entities until some process 
chooses to receive them. Generative communication results in a number ... 
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Implementation of a WebDAV-based collaborative distance learning environment 
Changtao qu, Thomas Engel, Christoph Meinel 

October 2000 Proceedings of the 28th annual ACM SIGUCCS conference on User 
services: Building the future 

Publisher: ACM Press 

Full text available: fjlpdf(1 84.04 KB) Additional Information: full citation, references , citing s, index terms 



Keywords: Java 2 platform enterprise edition, JavaServer pages, collaborative distance 
learning, enterprise JavaBeans, virtual university, web-based distributed authoring and 
versioning 



2 Application servers (panel session): born-again TP monitors f or the Web * 
C. Mohan, Larry Cable, Matthieu Devin, Scott Dietzen, Pat Helland, Dan Wolfson 
May 2001 ACM SIGMOD Record , Proceedings of the 2001 ACM SIGMOD international 

conference on Management of data SIGMOD '01, volume 30 issue 2 
Publisher: ACM Press 

Full text available: ^pdf(16.89 KB) Additional Information: f ull cit ation, re fere nces, citings, index terms 




Business-to-business interactions: issues and enabling technolo g ies 

B. Medjahed, B. Benatallah, A. Bouguettaya, A. H. H. Ngu, A. K. Elmagarmid 

May 2003 The VLDB Journal — The International Journal on Very Large Data Bases, 

Volume 12 Issue 1 
Publisher: Springer-Verlag New York, Inc. 

Full text available: ^ pdf(558.34 KB) Additional Information: full citation , abstract , citings , index terms 

Business-to-Business (B2B) technologies pre-date the Web. They have existed for at least 
as long as the Internet. B2B applications were among the first to take advantage of 
advances in computer networking. The Electronic Data Interchange (EDI) business 
standard is an illustration of such an early adoption of the advances in computer 
networking. The ubiquity and the affordability of the Web has made it possible for the 
masses of businesses to automate their B2B interactions. However, several issu ... 

Keywords: B2B Interactions, Components, E-commerce,.EDI, Web services, Workflows, 
XML 
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portals: principles to practice 
Tushar K. Hazra 

May 2002 Proceedings of the 24th International Conference on Software 
Engineering 

Publisher: ACM Press 

Full text available: ^ pdf(1.85 MB) Additional Information: full citation , abstract , references , index terms 

Primary objective of this paper is to offer an exclusive view of constructing and deploying 
enterprise portals by using a component-based development approach. As the dot-com 
hype dies down, most companies are forced to revisit their enterprise-wide Web 
integration strategies. This paper offers a pragmatic roadmap that these companies may 
follow in their upcoming enterprise portal deployment initiatives.The academic world plays 
a significant role in the advances of the portal technology. In this ... 



5 Technical Session: Crossing the bridge while you build it: a smooth migration to new Q 
servers and services 

Wlliam R. Anderson, Larry Fields, Thelma Simons, Kathy Pribbenow, Christopher Jones 
October 2001 Proceedings of the 29th annual ACM SIGUCCS conference on User 

services 
Publisher: ACM Press 

Full text available: ^ pdf(1 53.78 KB) Additional Information: full citation , abstract , index terms 

This paper accompanies a panel discussion by members of the computing support staff at 
Georgetown University, The University of Kansas, and The University of Oregon. Each 
school migrated its customers to a new e-mail system; some of the migrations included 
other services, such as web hosting and calendaring. Georgetown University migrated from 
a GroupWise mail and calendaring system and UNIX mail to Netscape (now iPlanet) 
Messaging Server and Steltor CorporateTime. Computing support staff learned ... 

Keywords: Microsoft Exchange, Microsoft Outlook, calendar, e-mail, migration, new 
server, new service, panel, roll-out, software deployment 




6 Columns: Surfing the net for software engineering notes Q 
Mark Doernhoefer 

November 2001 ACM SIGSOFT Software Engineering Notes, volume 26 issue 6 
Publisher: ACM Press 

Full text available: ^ pdf(1.99 MB) Additional Information: full citation 




7 Large-scale mail with Postfix, OpenLDAP and courier Q 
Dave Dribin, Keith Garner 

February 2003 Linux Journal, volume 2003 issue 106 
Publisher: Specialized Systems Consultants, Inc. 

Full text available: g] html(25.24 KB) Additional Information: full citation, abstract , index terms 
Here's a flexible solution for hosting mail for many domains on one server. 
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